CVE-2019-6532

EPSS 3.8%CWE-843

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 3.8%KEV nãoPoC —Patch —

Ciclo de vida

07 jun 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.

Productos afectados

Panasonic · FPWIN Pro

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02 https://www.zerodayinitiative.com/advisories/ZDI-19-566/https://www.zerodayinitiative.com/advisories/ZDI-19-568/https://www.zerodayinitiative.com/advisories/ZDI-19-570/http://www.securityfocus.com/bid/108683